What problem does it solve? Keeping pnpm and its CI integrations current is error-prone: the packageManager field needs an exact sha512 integrity hash, and GitHub Actions must be pinned to immutable commit SHAs rather than mutable tags. This Skill automates that multi-step upgrade without blunt search-and-replace edits. ## Core Features & Use Cases - Local pnpm upgrade: Runs pnpm self-update or falls back to corepack prepare, then captures the resulting version. - Integrity-pinned packageManager: Queries the npm registry for the package integrity, converts the sha512 digest to hex, and writes the full pnpm@version+sha512.hash string into package.json. - Workflow pin refresh: Resolves the latest pnpm/action-setup release tag to a commit SHA via git ls-remote and updates each workflow file by hand, preserving quoting and indentation. - Use Case: A maintainer wants to bump the pnpm toolchain across a monorepo before a release; the Skill updates the local install, package.json, and all .github/workflows pins, then verifies with git diff. ## Quick Start Use $pnpm-upgrade to update pnpm locally, align the packageManager field in package.json, and refresh the pinned pnpm/action-setup versions in my GitHub workflows.
